tkko Privacy Policy —
Your Data, Handled With Care

This Privacy Policy describes how tkko ("we", "us", "our", or "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "your", or "the Player") who access or use the tkko online betting and casino platform at tkko.io and all associated services.

tkko is committed to handling personal data with transparency, integrity, and in accordance with applicable data protection principles. We recognise that our players in Bangladesh and elsewhere entrust us with sensitive personal and financial information, and we take that responsibility seriously.

By registering an account on the tkko platform, making a deposit, or using any feature of the service, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this policy, please discontinue your use of the platform and contact our support team to close your account.

tkko collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically as you use the service, and — in limited circumstances — from trusted third-party sources such as payment processors and identity verification partners.

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, email address, mobile phone number, and chosen username when you create a tkko account.
• Identity verification documents: Copies of government-issued identity documents (such as a national identity card or passport) and proof-of-address documents (such as a utility bill or bank statement) when required for KYC (Know Your Customer) verification.
• Payment information: Mobile banking account references (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) used to make deposits or receive withdrawals. Full card numbers and mobile banking PINs are never stored directly by tkko — payment credentials are handled exclusively by our certified payment gateway partners.
• Support communications: Any messages, complaints, dispute submissions, or other correspondence you send to the tkko support team via email or the platform's messaging interface.
• Responsible gaming submissions: Self-exclusion requests, deposit limit settings, session time limit preferences, and any other responsible gaming elections you make through your account settings.

2.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bet history, session duration, click patterns, and navigation paths within the platform.
• Transaction logs: A complete record of all deposits, withdrawals, bets placed, games played, bonuses claimed, and balance movements associated with your account.
• Cookie and session data: Information stored in cookies and local storage to maintain your session, remember your preferences, and support platform analytics. See Section 6 for full cookie details.

2.3 Data From Third Parties

• Payment gateway confirmations: Transaction status and reference data provided by payment processors to confirm the success or failure of deposit and withdrawal transactions.
• Fraud and risk signals: Aggregated risk signals from fraud prevention partners to help identify suspicious account activity, money laundering attempts, or multiple-account violations.
• Identity verification results: Pass/fail outcomes from third-party identity verification services used during KYC checks.

tkko uses the personal data it collects for the following purposes. In every case, the use of your data is limited to what is necessary to achieve the stated purpose:

tkko processes your personal data on one or more of the following legal bases, depending on the specific processing activity in question:

• Contractual necessity: Processing that is necessary to perform the contract between you and tkko — including account management, payment processing, and platform access — is carried out on the basis that it is required to fulfil our contractual obligations to you.
• Legal obligation: Processing that is required to comply with applicable laws and regulations — including anti-money laundering (AML) obligations, age verification requirements, and responses to lawful authority requests — is carried out on the basis of legal obligation.
• Legitimate interests: Processing carried out to protect the platform's security, prevent fraud, operate responsible gaming safeguards, and improve platform performance is conducted on the basis of tkko's legitimate interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for optional purposes such as sending marketing communications is carried out only where you have given your explicit, freely given, informed, and unambiguous consent. You may withdraw this consent at any time.

tkko does not sell, rent, or lease your personal data to unaffiliated third parties for their own commercial or marketing purposes. Data is shared externally only in the following limited circumstances:

• Payment processing partners: Your payment reference data is shared with certified payment gateway providers — including bKash, Nagad, Rocket, Upay, and international card processors — solely to facilitate the deposit and withdrawal transactions you initiate. These partners are contractually bound to process your data only for payment fulfilment and in accordance with applicable data protection standards.
• Identity and fraud verification services: Where required for KYC verification or fraud prevention, limited identity data may be shared with specialist third-party verification providers. These providers operate under strict contractual data processing agreements.
• Game providers: Technical session data (such as session tokens and wager amounts) is shared with our Game Provider partners — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to the extent necessary to deliver their games within the tkko platform. Game providers do not receive your full personal profile.
• Legal and regulatory authorities: tkko may disclose personal data to law enforcement agencies, financial intelligence units, regulators, or courts where required by applicable law, a valid court order, or where disclosure is necessary to protect the rights and safety of tkko, its players, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets of the tkko business, personal data held by the platform may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of any such transfer and of any changes to the privacy terms that apply to their data.

tkko uses cookies and similar technologies (such as local storage and session storage) on the tkko.io platform. Cookies are small text files stored on your device that help the platform function correctly and improve your experience.

6.1 Types of Cookies Used

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and enable core features such as the betting interface and payment flows. These cookies cannot be disabled without affecting platform functionality.
• Analytical / performance cookies: These cookies collect anonymous or aggregated data about how players use the tkko platform — such as which pages are visited most frequently, how long sessions last, and where navigation errors occur. This data is used solely to improve platform performance and user experience. Individual players cannot be identified from this data.
• Functional cookies: These cookies remember choices you have made — such as your preferred language, your last-used payment method, or your responsible gaming settings — to provide a more personalised experience on your next visit.

6.2 What tkko Does NOT Use Cookies For

• Building individual advertising profiles for use by ad networks.
• Tracking your browsing activity across websites other than tkko.io.
• Sharing your browsing behaviour with social media platforms or third-party marketers.

6.3 Managing Cookies

You can control and delete cookies through your browser settings. Most modern browsers allow you to refuse new cookies, delete existing cookies, and receive notifications when new cookies are set. Please note that disabling strictly necessary cookies may impair your ability to log in or use certain platform features. Consult your browser's help documentation for instructions on managing cookie preferences.

tkko implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the tkko platform is encrypted using industry-standard Transport Layer Security (TLS) protocols, ensuring that information cannot be intercepted in transit.
• Access controls: Access to personal data within the tkko organisation is restricted on a strict need-to-know basis. Staff members who do not require access to player data to perform their job functions are not granted such access.
• Secure credential storage: Account passwords are stored using industry-standard one-way hashing algorithms. tkko staff cannot view your password in plain text; only you know your password.
• Payment data isolation: Full payment credentials (card numbers, mobile banking PINs) are never stored on tkko servers. Payment data is handled exclusively by our certified third-party payment gateway partners who maintain their own rigorous security standards.
• Intrusion detection and monitoring: The tkko platform is subject to continuous security monitoring to detect and respond to suspicious activity, unauthorised access attempts, and potential data breaches.
• Incident response: In the event of a confirmed personal data breach that is likely to result in a risk to your rights and freedoms, tkko will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.

tkko retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

Once a retention period expires, personal data is either securely deleted from tkko systems or anonymised such that it can no longer be linked to an identifiable individual. Anonymised data may be retained indefinitely for statistical analysis and platform improvement purposes.

Subject to applicable law, you have the following rights in relation to the personal data tkko holds about you. To exercise any of these rights, please contact the tkko support team at [email protected] with a clear description of your request. tkko will respond within 30 days of receiving a valid request.

• Right of access: You have the right to request a copy of the personal data tkko holds about you, together with information about how that data is being used and on what legal basis.
• Right to rectification: If any personal data tkko holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
• Right to erasure: In certain circumstances, you have the right to request that tkko delete the personal data it holds about you. This right is not absolute — it does not apply where retention is required for legal compliance, fraud prevention, or the establishment and defence of legal claims.
• Right to restrict processing: You have the right to request that tkko restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or where you have objected to processing based on legitimate interests pending verification of those interests.
• Right to data portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive the personal data you have provided to tkko in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object at any time to the processing of your personal data on the basis of tkko's legitimate interests, including profiling carried out on that basis. You also have an unconditional right to object to the processing of your personal data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The tkko platform is strictly intended for adults aged 21 years and above. tkko does not knowingly collect personal data from any person under the age of 21. If tkko becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and have reason to believe that a minor in your care has registered an account on the tkko platform or provided personal data to us, please contact our support team immediately at [email protected]. We will take prompt action to investigate and, where confirmed, to delete the relevant data and close the account.

The tkko platform serves players primarily in Bangladesh. In certain circumstances, personal data may be transferred to or processed by systems or service providers located outside Bangladesh — for example, where a Game Provider's servers or a fraud prevention partner's systems are located in a different jurisdiction.

Where such transfers occur, tkko takes appropriate steps to ensure that your personal data receives a level of protection consistent with the standards described in this Privacy Policy. These steps may include entering into contractual data processing agreements with the relevant service providers that incorporate appropriate data protection clauses.

By using the tkko platform, you acknowledge and consent to the transfer of your personal data in the circumstances described in this section, subject to the safeguards described above.

The tkko platform may contain references to third-party services such as payment providers and game studios. This Privacy Policy applies solely to data collected and processed by tkko through the tkko.io platform. It does not apply to any third-party websites, services, or platforms that you may access independently.

tkko is not responsible for the privacy practices of third parties. If you access a third-party service — for example, by opening your bKash app to complete a transaction — we encourage you to review that service's own privacy policy to understand how your data is handled in that context.

tkko reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the nature of the services we offer. When a material change is made, we will publish the revised policy on this page with an updated "Last Updated" date and, where appropriate, notify registered players via the email address associated with their account.

Your continued use of the tkko platform after the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any changes, please stop using the platform and contact our support team to request account closure and deletion of your personal data (subject to retention obligations described in Section 8).

If you have any questions about this Privacy Policy, wish to exercise any of the data rights described in Section 9, or have a concern about how your personal data has been handled by tkko, please contact our support team using the details below. All contact details are displayed as plain text only and are not clickable links.

When submitting a data rights request, please include your registered username and the email address associated with your tkko account so that we can locate your records and verify your identity efficiently. tkko is committed to responding to all privacy-related enquiries promptly, professionally, and in full compliance with the principles set out in this policy.